Demo Discussion
Forum Config Examples Contributions Vulnerabilities
  Discussion forum about ELOG, Page 213 of 796  Not logged in ELOG logo
 Find |  Login |  Help 
 Full | Summary | Threaded | Show attachments  Show only new entries    6363 Entries 
Goto page Previous  1, 2, 3 ... 212, 213, 214 ... 794, 795, 796   Next  
ID Date Icon Author Author Emaildown Category OS ELOG Version Subject
  65936   Wed Jul 30 10:06:57 2008 Reply Stefan Rittstefan.ritt@psi.chBug reportWindows2.73-1.exeRe: Elogd.exe crashes almost everyday

jh wrote:

My Elog running on windows 2003 sp1 is crashing with this error "  Faulting application elogd.exe, version 0.0.0.0, faulting module elogd.exe, version 0.0.0.0, fault address 0x00061330."  the version of elogd.exe is  has a built date of 2/22/2008.  Will upgrading to the latest windows binary resolve this issue?    Thanks!!

 I would give it a try!

  65938   Thu Jul 31 09:25:01 2008 Reply Stefan Rittstefan.ritt@psi.chBug reportLinux2.7.4-2113Re: Exploit Browser Tabs to Make Anonymous Entries

Alan Stone wrote:

One of my shifters just managed to make an anonymous logbook entry even though the Author attribute is required.

It turns out that he had two tabs in his browser opened/logged into the Elog.  He logged out in one tab only.   Then he

did some other work on the desktop.  Then he returned to the browser to make a new logbook entry, finding the tab which

still showed the logged in menu, including the link for "New".  The Shifer is on day two, so he did not give any special

notice to seeing Anonymous in the Author field instead of his name.  He did point it out when I came in, and noted that

no warning was given about making an anonymous entry.

 

I tested the same scenario myself.  One cannot preview an anonymous entry (when Author field is a required attribute).

A warning is given.  However, one can submit the anonymous entry, and no warning is given.

 What configuration do you use? I tried to reproduce your problem with a "minimal" configuration like

[demo]
Attributes = Author, Subject
Preset Author = $long_name
Locked Attributes = Author

When I log out from the second browser tab and click on "New" on the first browser tab, I am shown the login page, not the new entry page. I guess your "menu commands" and "guest menu commands" allow non-logged in users to issue a "New" command. Try removing that.

Stefan

  65940   Thu Jul 31 17:22:23 2008 Reply Stefan Rittstefan.ritt@psi.chQuestionAll2.7.3-2058Re: html code in reply window

Tom Plancon wrote:

Hello,

Recently upgraded to 2.7.3 and I'm seeing html code filling up the reply window. Before I would just see [quote] and [/quote] around the original entry. Did I miss something in the upgrade? Thanks!

 Probably you did not install the FCKeditor. Just try a reply to this message, and you will see the many formatting icons on top of the page coming from that HTML editor. Without the editor, you will only see the plain HTML. You can switch back however to the old behavior by selecting the ELCode encoding. You can make this permanent with the "Default encoding =0" option.

  65942   Mon Aug 4 09:00:43 2008 Reply Stefan Rittstefan.ritt@psi.chQuestionLinux2.7.3Re: deadc0de

Niklas wrote:

my ELOG sometimes dies with "deadc0de", do I have too large ELOG config or logbook? Or is it simply a bug?

What can I do to solve this problem? "ulimit"? Or some trace output from elog?

 This seems an internal memory allocation problem. Can you reproduce the error? Can you reproduce it with the minimal configuration file coming with the distribution? If you know how to run a program inside the debugger, you can send me a stack trace when the problem occurs and I can check it.

  65949   Mon Aug 11 11:02:18 2008 Reply Stefan Rittstefan.ritt@psi.chQuestionLinux2.7.4-2111Re: Using the command line tool to edit

T. Ribbrock wrote:

I intend to create a script that updates one of our elog logbooks based on mails it receives. I was hoping to be able to do this using the "elog" command line tool. Adding a new entry works fine, as does "replying" to an existing entry. The only thing I cannot get to work is editing an existing entry. All entries ahve several attributes and I intend not to use the "message" itself. I tried the following (on the machine this elogd is running on):

  1. Create a new entry with Attribute1 set to "value":

    elog -a 'Attribute1=value' -x -h localhost -l 'LOGBOOK' -p 8080 -u USER PASSWD

    This works - the entry gets created and is displayed properly.
    NOTE: I found that this does not work if LOGBOOK has any spaces in it - I would get error messages where the logbook was not found.
     
  2. Edit this entry to set a second attribute:

    elog -e 1 -a 'Attribute2=something' -x -h localhost -l 'LOGBOOK' -p 8080 -u USER PASSWD

    The result was: Error transmitting message. Running the same command with -v gives me a whole bunch of text with at the end this message (I've stripped the HTML): "This entry has in meantime been modified by someone else. Submitting it now would overwrite the other modification and is therefore prohibited." However, I know for certain that this entry is not being editied by anyone at that moment, so I'm wondering what I'm doing wrong here...

Also, I have a second, related question: Editing by the ID of the entry seems to be the only way of editing an entry - this makes it a bit difficult for me, as all entries already have a unique ID (which is defined as one of the attributes) that is non-numerical and not sequential. What is the easiest way to retrieve an ID from the command line (basically something like: "What ID has the entry with Attribute1==NAME?")? Is it possible at all? Otherwise, I would not be able to automatically edit the entries, as I don't know which is which... :-}

 I fixed two things:

  • The logbook can now contain a space. Enclose it in double quotes such as elog -l "LOG BOOK" ...
  • The error you report comes from the fact that you are the first person using elog submissions together with "use lock=1" in the configuration file. This has never been tested and therefore does not work . So I fixed this by adding a new hidden parameter. If you update to SVN revision 2122, things should work

Concerning your request of editing existing entries by their idea, I agree with Yoshi that you could grab the ID upon the first submission. An alternative is to make a direct search on a logbook. Since this is not implemented in the elog command line tool, you have to use wget for it:

wget "http://localhost:8080/LOGBOOK/?mode=raw&Attribute1=something" -O elog.txt

A problem here is that the username and password are normally transmitted in an encrypted form as cookies by your browser after you logged in. Now you have to convince wget first to log in like

wget "http://localhost:8080/LOGBOOK/?unamee=USER&upassword=PASSWD"--save-cookies cookies.txt

followed by a second call to wget with --load-cookies cookies.txt. I tried that but was not successful since the login procedure above redirects to the elog listing page, and only the cookies set after the redirection were saved in cookies.txt. Maybe you can figure out how to do that. The only way I could get it to work is to supply the encoded password, which I manually obtained from the password file. The URL was then

wget "http://localhost:8080/LOGBOOK/?mode=raw&Attribute1=something&unm=USER&upwd=ENC_PWD" -O elog.txt
  65952   Tue Aug 12 08:42:58 2008 Reply Stefan Rittstefan.ritt@psi.chBug reportWindows Re: Copy & Move To in Spanish

Marimar Rodriguez wrote:

when I choose the Spanish language, the command Copy To isn't allowed. I have had to change the language file and  change the line:

Copy To = Copiar a

to

Copy To = Copy To

That's strange. I just tried (even with Spanish) and it worked for me. Which version of elog do you have installed? Can you send me your elogd.cfg file?

  65957   Mon Sep 1 13:48:29 2008 Reply Stefan Rittstefan.ritt@psi.chQuestionLinux Re: Grabbing user name from SSL user certificate

Davide Salomoni wrote:

With SSL enabled, I'd like to to grab the CN (Common Name) of the user certificate and use that as login authentication method.

I am thinking of the following scenario:

- users with read & write privileges need to have an SSL certificate loaded in their browser. The "Author" field will be pre-set to the CN of the user certificate.

- authorization may be subject to further granularity (e.g. only allow users whose certificate belongs to a certain organization)

- read-only, guest access (without certificate) may or may not be allowed

 

Is there a way to do that?

 I put your request on the wish list.

  65958   Mon Sep 1 13:54:53 2008 Reply Stefan Rittstefan.ritt@psi.chQuestionWindowsV2.7.4-212Re: Automatic Copy to

Grant Jeffcote wrote:
Stefan,

Is there any way I might be able to initiate the 'copy to' function by selecting a 'tick box' (boolean) or conditional attribute choice in an entry page when submitting that page? We have a requirement where we run a main 'Operations' log and have another log with some entries needing to be in both (for additional actions etc). I understand the Operator can always manually use the 'Copy To' function after submitting the original entry but was wondering if there was some way a shell script (execute function?) or similar may be activated by a boolean or even a 'conditional' choice?

Thx


I put your request on the whishlist.
Goto page Previous  1, 2, 3 ... 212, 213, 214 ... 794, 795, 796   Next  
ELOG V3.1.5-2eba886